@bluefly/openstandardagents 0.1.9 → 0.2.5-RC

package/.cursorrules

@@ -0,0 +1,84 @@
+# OSSA Project Rules for Cursor Agent
+
+This file contains project-specific rules for Cursor Agent. Additional detailed rules are in `.cursor/rules/`.
+
+## Core Principles
+- OpenAPI-First: All APIs must be defined in OpenAPI 3.1 specs
+- TDD-Centric: Write tests first, then implement, then refactor
+- Schema-Driven: OSSA schema is the source of truth
+- No Vendor Lock-in: OSSA is a standard, not a framework
+
+## Critical Workflows
+
+### Version Management
+**NEVER manually update version numbers in any file.**
+- Single source of truth: `.version.json`
+- Use `npm run version:bump <type>` to change versions (rc, patch, minor, major, release)
+- Use `{{VERSION}}` placeholders in documentation
+- Versions auto-sync before every build
+- See `.gitlab/docs/development/VERSIONING.md` for complete guide
+
+### Before Config Work
+**ALWAYS** run `ddev drush cst` before working with Drupal config. This is CRITICAL.
+
+### Schema Updates
+1. Update schema JSON in `spec/v0.2.5-RC/`
+2. Run `npm run gen:types` to generate TypeScript types
+3. Run `npm run gen:zod` to generate Zod validators
+4. Run `npm run validate:schema` to validate schema
+5. Update examples and tests
+
+### OSSA Manifest Validation
+- All `.ossa.yaml` and `agent.yml` files must validate
+- Run `ossa validate` before committing
+- Examples in `examples/` must all validate
+
+### Testing Requirements
+- Unit tests for service logic and utilities
+- Integration tests for CLI commands and workflows
+- E2E tests for full validation workflows
+- 95%+ test coverage required
+
+## Prohibited Operations
+- ❌ Direct commits to `main` or `development` branches
+- ❌ Skipping tests
+- ❌ Breaking schema without migration
+- ❌ Hardcoded secrets
+- ❌ Bypassing hooks (`LEFTHOOK=0`)
+- ❌ Creating `.md` files (use GitLab Wiki)
+- ❌ Creating `.sh` files (use TypeScript/Node scripts)
+- ❌ Deleting critical files (use `__DELETE_LATER/` folder)
+
+## File Organization
+- `spec/` - OSSA schema definitions
+- `src/` - Source code (TypeScript)
+- `tests/` - Test files (unit, integration, e2e)
+- `examples/` - Example OSSA manifests
+- `openapi/` - OpenAPI specifications
+- `docs/` - Documentation
+
+## Custom Commands
+Use these custom commands for OSSA workflows:
+- `/ossa-validate` - Validate OSSA manifests
+- `/ossa-generate` - Generate OSSA agents
+- `/ossa-migrate` - Migrate between versions
+- `/ossa-test` - Run test suite
+- `/ossa-openapi` - Work with OpenAPI specs
+- `/ossa-schema` - Work with schema
+- `/ossa-release` - Manage releases
+- `/ossa-refactor` - Refactor code
+- `/ossa-debug` - Debug issues
+
+## Git Workflow
+- Feature branches branch off `development`
+- No direct commits to `main` or `development`
+- Merge requests required
+- CI must pass before merge
+
+## Release Process
+Releases require:
+- Milestone 100% complete and closed
+- `ENABLE_RELEASE=true` CI variable set
+
+See `.cursor/rules/ossa-development.md` for detailed rules.
+

package/.devfile.yaml

@@ -0,0 +1,87 @@
+schemaVersion: 2.2.0
+metadata:
+  name: ossa-development
+  version: 0.2.5-RC
+  description: OSSA development environment with GitLab agent access
+components:
+  - name: dev-tools
+    container:
+      image: node:22-alpine
+      memoryLimit: 4Gi
+      cpuLimit: 2000m
+      mountSources: true
+      env:
+        - name: NODE_ENV
+          value: development
+        - name: KUBECONFIG
+          value: /workspace/.kube/config
+      volumeMounts:
+        - name: kube-config
+          path: /workspace/.kube
+  
+  - name: kubectl
+    container:
+      image: bitnami/kubectl:latest
+      memoryLimit: 512Mi
+      cpuLimit: 500m
+      env:
+        - name: KUBECONFIG
+          value: /workspace/.kube/config
+      volumeMounts:
+        - name: kube-config
+          path: /workspace/.kube
+
+volumes:
+  - name: kube-config
+    ephemeral: true
+
+commands:
+  - id: install
+    exec:
+      component: dev-tools
+      commandLine: npm ci --legacy-peer-deps
+      workingDir: ${PROJECT_SOURCE}
+  
+  - id: build
+    exec:
+      component: dev-tools
+      commandLine: npm run build
+      workingDir: ${PROJECT_SOURCE}
+  
+  - id: test
+    exec:
+      component: dev-tools
+      commandLine: npm test
+      workingDir: ${PROJECT_SOURCE}
+  
+  - id: lint
+    exec:
+      component: dev-tools
+      commandLine: npm run lint
+      workingDir: ${PROJECT_SOURCE}
+  
+  - id: version-sync
+    exec:
+      component: dev-tools
+      commandLine: npm run version:sync
+      workingDir: ${PROJECT_SOURCE}
+  
+  - id: deploy-agents
+    exec:
+      component: kubectl
+      commandLine: kubectl apply -f .gitlab/agents/
+      workingDir: ${PROJECT_SOURCE}
+  
+  - id: get-pods
+    exec:
+      component: kubectl
+      commandLine: kubectl get pods -n ossa-agents
+  
+  - id: agent-logs
+    exec:
+      component: kubectl
+      commandLine: kubectl logs -n ossa-agents -l app=version-manager --tail=100 -f
+
+events:
+  postStart:
+    - install

package/.env.example

@@ -1,13 +1,35 @@
 # OSSA Production Environment Variables
-# Copy to .env and update values
+# Copy to .env.local and update values
 
 # ===========================================
 # Version & Environment
 # ===========================================
-VERSION=0.1.9
+VERSION=0.2.4
 NODE_ENV=production
 LOG_LEVEL=info
 
+# ===========================================
+# GitLab Configuration
+# ===========================================
+# Primary GitLab instance (PUBLIC - gitlab.com)
+GITLAB_PRIMARY_URL=https://gitlab.com/blueflyio/openstandardagents
+GITLAB_API_URL=https://gitlab.com/api/v4
+GITLAB_PUSH_TOKEN=your-gitlab-push-token-here
+GITLAB_URL=https://gitlab.com
+GITLAB_PROJECT_PATH=blueflyio/openstandardagents
+GITLAB_PROJECT_ID=your-project-id
+
+
+# ===========================================
+# GitHub Configuration (Mirror)
+# ===========================================
+GITHUB_API_URL=https://api.github.com
+GITHUB_BASE_URL=https://api.github.com
+GITHUB_URL=https://github.com
+GITHUB_REPOSITORY=blueflyio/openstandardagents
+GITHUB_MIRROR_TOKEN=your-github-token-here
+GITHUB_TOKEN=your-github-token-here
+
 # ===========================================
 # Security & Authentication
 # ===========================================
@@ -38,4 +60,4 @@ PROMETHEUS_URL=http://prometheus:9090
 # Development Overrides (optional)
 # ===========================================
 # DOCKER_BUILDKIT=1
-# COMPOSE_PROJECT_NAME=ossa
+# COMPOSE_PROJECT_NAME=ossa

package/.eslintrc.cjs

@@ -0,0 +1,43 @@
+module.exports = {
+  root: true,
+  parser: '@typescript-eslint/parser',
+  parserOptions: {
+    ecmaVersion: 2020,
+    sourceType: 'module',
+    project: './tsconfig.json',
+  },
+  plugins: ['@typescript-eslint'],
+  extends: [
+    'eslint:recommended',
+    'plugin:@typescript-eslint/recommended',
+  ],
+  env: {
+    node: true,
+    es2020: true,
+  },
+  rules: {
+    '@typescript-eslint/explicit-module-boundary-types': 'off',
+    '@typescript-eslint/no-explicit-any': 'warn',
+    '@typescript-eslint/no-unused-vars': ['warn', { argsIgnorePattern: '^_' }],
+  },
+  ignorePatterns: [
+    'node_modules/',
+    'dist/',
+    'out/',
+    '*.js',
+    '*.d.ts',
+    'website/',
+    'examples/',
+  ],
+  overrides: [
+    {
+      files: ['tests/**/*.ts'],
+      parserOptions: {
+        project: null,
+      },
+      rules: {
+        '@typescript-eslint/no-explicit-any': 'off',
+      },
+    },
+  ],
+};

package/.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,39 @@
+## Description
+
+<!-- Describe your changes in detail -->
+
+## Type of Change
+
+<!-- Mark relevant options with an x -->
+
+- [ ] `feat`: New feature (minor version bump)
+- [ ] `fix`: Bug fix (patch version bump)
+- [ ] `docs`: Documentation only changes
+- [ ] `refactor`: Code refactoring
+- [ ] `perf`: Performance improvement
+- [ ] `test`: Adding or updating tests
+- [ ] `chore`: Build process or tooling changes
+- [ ] `BREAKING`: Breaking change (major version bump)
+
+## Conventional Commit
+
+<!-- Your PR title should follow conventional commits format -->
+
+**Example titles:**
+- `feat: add support for OpenAI Assistants API`
+- `fix: resolve schema validation edge case`
+- `feat!: redesign manifest schema` (breaking change)
+
+## Checklist
+
+- [ ] My code follows the code style of this project
+- [ ] I have updated the documentation accordingly
+- [ ] I have added tests to cover my changes
+- [ ] All new and existing tests passed
+- [ ] My commits follow the conventional commits specification
+
+## Related Issues
+
+<!-- Link to related issues -->
+
+Closes #

package/.github/dependabot.yml

@@ -0,0 +1,58 @@
+version: 2
+updates:
+  # Enable version updates for npm (main package)
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    open-pull-requests-limit: 10
+    reviewers:
+      - "BlueflyCollective/ossa-maintainers"
+    labels:
+      - "dependencies"
+      - "automated"
+    commit-message:
+      prefix: "chore"
+      include: "scope"
+    groups:
+      production-dependencies:
+        dependency-type: "production"
+        update-types:
+          - "minor"
+          - "patch"
+      development-dependencies:
+        dependency-type: "development"
+        update-types:
+          - "minor"
+          - "patch"
+
+  # Enable version updates for npm (website)
+  - package-ecosystem: "npm"
+    directory: "/website"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    open-pull-requests-limit: 5
+    reviewers:
+      - "BlueflyCollective/ossa-maintainers"
+    labels:
+      - "dependencies"
+      - "website"
+      - "automated"
+    commit-message:
+      prefix: "chore(website)"
+      include: "scope"
+
+  # Enable version updates for GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    labels:
+      - "dependencies"
+      - "github-actions"
+      - "automated"
+    commit-message:
+      prefix: "ci"

package/.github/workflows/ci.yml

@@ -0,0 +1,154 @@
+name: CI
+
+on:
+  push:
+    branches: [main, develop]
+  pull_request:
+    branches: [main, develop]
+
+env:
+  NODE_VERSION: '20'
+
+jobs:
+  validate:
+    name: Validate
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Validate Node.js version
+        run: node --version
+
+      - name: Validate OSSA manifests
+        run: npm run validate
+
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run ESLint
+        run: npm run lint
+
+  test:
+    name: Test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run tests
+        run: npm test
+
+      - name: Upload coverage
+        uses: codecov/codecov-action@v4
+        if: success()
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
+          files: ./coverage/lcov.info
+          fail_ci_if_error: false
+
+  security:
+    name: Security Audit
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: 'npm'
+
+      - name: Run npm audit
+        run: npm audit --audit-level=moderate || true
+
+      - name: Run Snyk security scan
+        uses: snyk/actions/node@master
+        if: github.event_name == 'pull_request'
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        with:
+          args: --severity-threshold=high
+
+  build:
+    name: Build
+    runs-on: ubuntu-latest
+    needs: [validate, lint, test]
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build package
+        run: npm run build
+
+      - name: Upload build artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+          retention-days: 7
+
+  website-build:
+    name: Build Website
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: |
+          cd website
+          npm ci
+
+      - name: Build website
+        run: |
+          cd website
+          npm run build
+
+      - name: Upload website artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: website
+          path: website/out/
+          retention-days: 7

package/.github/workflows/codeql.yml

@@ -0,0 +1,41 @@
+name: CodeQL Security Analysis
+
+on:
+  push:
+    branches: [main, develop]
+  pull_request:
+    branches: [main]
+  schedule:
+    - cron: '0 0 * * 1' # Weekly on Mondays
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: ['javascript']
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: ${{ matrix.language }}
+          queries: +security-and-quality
+
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v3
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3
+        with:
+          category: "/language:${{ matrix.language }}"

package/.github/workflows/dependabot-auto-merge.yml

@@ -0,0 +1,28 @@
+name: Dependabot Auto-merge
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  auto-merge:
+    name: Auto-merge Dependabot PRs
+    runs-on: ubuntu-latest
+    if: github.actor == 'dependabot[bot]'
+    steps:
+      - name: Fetch Dependabot metadata
+        id: metadata
+        uses: dependabot/fetch-metadata@v1
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Auto-merge minor and patch updates
+        if: steps.metadata.outputs.update-type == 'version-update:semver-patch' || steps.metadata.outputs.update-type == 'version-update:semver-minor'
+        run: gh pr merge --auto --squash "$PR_URL"
+        env:
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

package/.github/workflows/release.yml

@@ -0,0 +1,103 @@
+name: Release
+
+on:
+  push:
+    branches:
+      - main
+      - develop
+
+env:
+  NODE_VERSION: '20'
+
+permissions:
+  contents: write
+  issues: write
+  pull-requests: write
+  packages: write
+
+jobs:
+  test:
+    name: Test Suite
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run tests
+        run: npm test
+
+      - name: Run build
+        run: npm run build
+
+  release:
+    name: Semantic Release
+    runs-on: ubuntu-latest
+    needs: test
+    if: github.event_name == 'push'
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build package
+        run: npm run build
+
+      - name: Semantic Release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          GIT_AUTHOR_NAME: 'github-actions[bot]'
+          GIT_AUTHOR_EMAIL: 'github-actions[bot]@users.noreply.github.com'
+          GIT_COMMITTER_NAME: 'github-actions[bot]'
+          GIT_COMMITTER_EMAIL: 'github-actions[bot]@users.noreply.github.com'
+        run: npx semantic-release
+
+  deploy-website:
+    name: Deploy Website to GitHub Pages
+    runs-on: ubuntu-latest
+    needs: test
+    if: github.ref == 'refs/heads/main'
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: |
+          cd website
+          npm ci
+
+      - name: Build website
+        run: |
+          cd website
+          npm run build
+
+      - name: Deploy to GitHub Pages
+        uses: peaceiris/actions-gh-pages@v3
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          publish_dir: ./website/out
+          cname: openstandardagents.org
+          commit_message: 'deploy: update website from ${{ github.sha }}'